Privacy Policy

SunPaphos is a property search and advisory team based in Paphos, Cyprus. We run this website and decide how the personal data collected through it is used — in data protection terms, we are the data controller.

Any question about this policy or about the data we hold on you: info@sunpaphos.com or +357 97 442 105.

Data you give us. When you fill in a form, call, or write to us on WhatsApp, Telegram or email, we receive your name, contact details (phone, email, messenger handle), your preferred language, and whatever you tell us about your search — budget, area, type of property, timing.

Data collected automatically. Like most websites, we record technical information: IP address, browser and device type, the pages you open, how you arrived on the site and your language setting. We use it in aggregate to keep the site working and to see which pages are actually useful.

How you use the pages. If you accept analytics cookies, we also record how the page is used — mouse movement, clicks, scrolling — so we can see where a page confuses people. Text you type into forms is hidden from these recordings before they leave your browser, so we never see your name, phone number or message this way.

We do not ask for special categories of data — health, religion, political views — and we do not knowingly collect data from children under 16.

• To answer your enquiry and help you find a property — steps taken at your request before any contract (GDPR Art. 6(1)(b)).
• To keep in touch about properties that match your brief, until you tell us to stop — our legitimate interest in serving people who have asked us for help (Art. 6(1)(f)).
• To measure and improve the site — only if you have accepted non-essential cookies (Art. 6(1)(a)).
• To meet accounting and other legal obligations, where they apply (Art. 6(1)(c)).

You can withdraw consent or ask us to stop contacting you at any time; it takes effect immediately and costs you nothing.

We do not sell your data and we do not pass it to anyone outside your enquiry. Depending on how far your search goes, your details may go to:

• Our licensed partner, Tsokkas Estate Agency — when a purchase goes ahead, since transactions are completed through them.
• The developer of a property you asked to see — the minimum needed to arrange a viewing or hold a unit, and only when you ask us to.
• Independent lawyers, banks and other professionals — only if you ask us for an introduction.
• Providers of the tools we run on — website hosting, email, messaging apps, analytics. They process data on our instructions only.
• Public authorities — only where the law requires it.

Necessary cookies keep the site working: your language choice, session state and the cookie preferences you have set. They cannot be switched off.

Analytics cookies (Google Analytics 4, loaded through Google Tag Manager, and Microsoft Clarity) show us which pages people read, where they leave and which parts of a page cause trouble. They are set only after you accept them in the cookie banner — decline, and they are not loaded at all. We do not use advertising or retargeting cookies.

You can change or withdraw your choice at any time in the cookie settings on the site, and you can block or delete cookies in your browser. The site still works either way; it just stops remembering some of your preferences.

Enquiries reach us by email and messaging apps and are kept in our own client records, so that the person handling your search has your history in one place. The website and its database are hosted on servers in the European Union.

Some of the tools we rely on — Google, Microsoft, WhatsApp, Telegram — may process data outside the European Economic Area. Where that happens, the transfer rests on the European Commission's adequacy decisions or on standard contractual clauses.

• Enquiries that did not lead to a purchase — up to 3 years from our last contact, then deleted.
• Records connected to a completed transaction — for as long as Cypriot law requires us and our partner to keep them.
• Analytics data — up to 14 months, in aggregated form.
• Page-use recordings — 30 days; the aggregated heatmaps built from them, up to 9 months.
• Your cookie choice — up to 12 months, after which we ask again.

Ask us to delete your data sooner and we will, unless a legal obligation says otherwise.

Under the GDPR you can ask for a copy of the data we hold on you, have it corrected or deleted, restrict or object to how we use it, receive it in a portable format, and withdraw any consent you have given. Exercising these rights is free and does not affect the service you get from us.

Write to info@sunpaphos.com and we will reply within one month. If our answer does not satisfy you, you can complain to the Office of the Commissioner for Personal Data Protection of Cyprus at dataprotection.gov.cy, or to the supervisory authority in your own country.

If we start using a new tool or change how we handle data, we update this page and the date at the top of it. Material changes are flagged on the site.

Questions about anything here: info@sunpaphos.com, +357 97 442 105, or through our contact page.